Four prominent Swedish companies are under the scanner for illicit data transfer to the U.S., marking a stark violation of EU’s GDPR rulings. The heart of this issue lies in their use of Google Analytics, leading to these privacy breaches. Interestingly, not all implicated parties bore the same guilt, showing varying levels of data safety vigilance. More caution and respect for GPDR’s regulations is thus urged from all companies dealing with data transfers. Undeniably, an increasing global scrutiny on data protection laws, demands such vigilance.